Manual. Cryptify Call application for Android. Rev O

Transcription

1 Manual Cryptify Call application for Android Rev O

2 Table of Contents SCOPE 3 PRE-REQUISITES 3 INTRODUCTION 4 PROCEDURES 5 INSTALLATION AND CONFIGURATION 5 INSTALL CRYPTIFY CALL 5 PROVISIONING USER CREDENTIALS 5 MAKE A SECURE CALL 6 CREATING AND SHARING CONTACT LISTS 8 ANSWER AN INCOMING SECURE CALL 11 DURING A CALL 12 ADDING FAVORITES 13 CONFERENCE CALLS 13 PARTICIPATING IN A CONFERENCE CALL 13 HOSTING A CONFERENCE CALL 14 SECURE TEXT MESSAGES 16 GROUPS 19 MANAGING A GROUP 20 JOINING A GROUP 24 BEING A GROUP MEMBER 25 CHANNELS 27 CRYPTIFY TEST CALL 28 THE ADVANCED MENU AND MESSAGE PIN LOCK 29 APPLICATION UPDATE 30 MANUAL KEY REMOVAL / REPLACEMENT 31 CONFIGURATION 32 APPLICATION SPECIFIC CONFIGURATION 32 TROUBLESHOOTING 33 REASON CODES 33 FAQ 34 CCA-13:013, CCA Android Manual, Rev O 2 (36)

3 Scope This document describes how to install, configure, operate and maintain the Cryptify Call application for Android. Target audience is end users of Cryptify Call. Pre-requisites A phone running Android 4.4 or later, preferably the latest version of Android should be used. CCA-13:013, CCA Android Manual, Rev O 3 (36)

4 Introduction Cryptify Call voice and messaging encryption for Android is approved by CESG for HMG communication at level RESTRICTED/OFFICIAL. Using Cryptify Call is as simple as making an ordinary phone call or SMS. Cryptify Call have a familiar user interface, and is using the ordinary phone numbers. The solution works in parallel with the ordinary functions of the phone enabling users to choose whether to make a secure or an ordinary call. Cryptify Call is using Mobile Data service in existing mobile networks and complementing Wi-Fi infrastructures. Being able to use Wi-Fi in addition to the Mobile Data services ensures a cost-efficient solution that provides even better availability than regular mobile voice service. Subject to authorization by the CMS of the respective organization, users can communicate with users belonging to other organizations in a end-to-end encrypted and authenticated manner. Cryptify Call is built on reliable standards and protocols enabling multi-vendor interoperability. The comprehensive security of the solution is based on wellproven standard algorithms and protocols such as Advanced Encryption Standard (AES), MIKEY-SAKKE, and Secure Real-time Transport Protocol (SRTP). IMPORTANT! To receive calls and messages the Cryptify Call application must be running. The application is designed to always run, it will not drain the battery and there is normally no reason to turn it off. Note! Cryptify Call is a Voice over IP (VoIP) solution and requires an Internet connection to work, either Wi-Fi or Cellular Data. In case of travelling abroad, please make sure Data Roaming is enabled on the cellular service! Note! When using Cryptify Call, please find a secluded place to talk. This might be obvious but can easily be forgotten. CCA-13:013, CCA Android Manual, Rev O 4 (36)

5 Procedures Installation and configuration There are two main ways in which Android devices are used in enterprises; administrators may have set up the devices with the Cryptify Call application, and other apps, before delivering them to end users, or end users may be able to install and updates app themselves. Install Cryptify Call If users are permitted to install, update or modify the apps on their Android devices, they can install Cryptify Call application on the device by opening the Google Play Store app, downloading and installing the Cryptify Call application by selecting "Cryptify Call" from the search tab and clicking the install button. Otherwise, if the Cryptify Call app is not installed, users should ask their administrators to provision it for them. Provisioning user credentials The first time the app is installed on the device it must be provisioned with user credentials before it can be used. The user credentials is encoded in a QR code printed on an initiation letter. The initiation letter will shall be delivered to the user in a safe way, for example by registered post. To provision the app, start the Cryptify Call app and use the embedded scanner to read the QR code provided in the initiation letter. It is recommended that the initiation letter be destroyed once successfully scanned in order to ensure the credentials don t get into the wrong hands. CCA-13:013, CCA Android Manual, Rev O 5 (36)

6 Make a secure call Making a secure call is as easy as dialing the number of the person to call, and normally the number is the same as the mobile number for that person. The only requirement is that both parties use Cryptify Call. The number can be entered using the dialpad. An alternative method to make a secure call is to use the Speed dial where favorites and frequently called numbers are displayed. A secure call can be initiated directly from the Speed dial. CCA-13:013, CCA Android Manual, Rev O 6 (36)

7 The application also has a Recents view where the call log is listed, and a Contacts view displaying all contacts available to the app. Contacts are sourced from the contact book stored on the phone and from distributed contact lists. A secure call can be initiated from the Details view of a selected contact. CCA-13:013, CCA Android Manual, Rev O 7 (36)

8 Tapping the lists icon on the Contacts tab shows all available contact lists. Lists that are enabled that is, are used as a source of contacts are marked with a checkmark. To enable or disable a list, tap the list and toggle the Enabled switch. Shared contact lists are automatically kept up-to-date, and to unsubscribe from future updates you need to contact the admin of the list. New lists appear in bold face. Creating and sharing contact lists Contact lists can be created within the Cryptify Call app, and optionally shared with other users in a secure manner. To create a new contact list, tap the + button and enter a name for the contact list. CCA-13:013, CCA Android Manual, Rev O 8 (36)

9 To modify the entries of the contact list, tap Contacts and then the edit button. To add a new contact, tap the floating action button and select either Create new contact, to manually create a new contact list entry, or Pick from contacts to copy existing contacts from other contact sources, including the native phone book. CCA-13:013, CCA Android Manual, Rev O 9 (36)

10 Similarly, the list of subscribers that is, those who will receive the contact list is edited by tapping Subscribers. As before, only a contact list that is marked as Enabled is used as a contact list source, but even disabled lists are distributed to subscribers. CCA-13:013, CCA Android Manual, Rev O 10 (36)

11 Answer an incoming secure call An incoming secure call will be displayed together with the number of the person who is calling and the Security Domain that person belongs to. If there is a contact available in the device for that number, the contact name is displayed instead of the number. The call is accepted by swiping the accept button to the right, or rejected by swiping the hang-up button to the left CCA-13:013, CCA Android Manual, Rev O 11 (36)

12 During a call When a secure call is active the user is presented with relevant information about the ongoing call, and can optionally add a third party. Name / Number of the other party Security Domain of the other party Call duration (minutes:seconds) Network Quality indicator Mute button (toggle) Toggle Bluetooth Keypad (to send DTMF tones) Add third party Audio Speaker (toggle) Warning, if using Bluetooth Hang-up button The Network Quality indicator shows the quality of the data connection, which might differ from the signal strength indicator provided by Android. An example is cell congestions; where the signal strength might be excellent but no data can be transmitted over the cellular network. CCA-13:013, CCA Android Manual, Rev O 12 (36)

13 Adding favorites The user can add favorites to the Speed dial view by selecting the favorite icon. Favorites are removed by unchecking the favorite icon. Conference calls In addition to three-party calls, Cryptify Call also supports secure, end-to-end encrypted conference calls. Participating in a secure conference call is just as easy as calling a regular conference bridge, and a conference call host controls which callers are allowed to join the conference call. Participating in a conference call To participate in a conference call you simply dial the six-digit number given to you by the conference call host on the dial pad, prefixed by ##. While you wait for the conference call host to accept your participation, the call screen displays Waiting for host and an ordinary ring back tone is played in the speaker. Once accepted by the host, the ring back tone stops and the duration timer starts. CCA-13:013, CCA Android Manual, Rev O 13 (36)

14 To view the list of all participants that the host has allowed to join the conference call, tap the Participants button. Hosting a conference call To host a conference call, you must first create a conference room. A conference room is identified by a six-digit number, which the system automatically generates. Once a conference room has been created, it can be used indefinitely. To create a conference room, select Conferences under the More menu, tap the + button and confirm the creation. A new conference room is then created and assigned a randomly selected number, which is used by participants to join the conference call. If desired, you can create multiple conference rooms and use them for different meetings, but you can only host one conference call at a time. To remove a conference room, simply long press the desired row and tap the delete button. It is not possible to recreate a conference room once it has been deleted; instead a new conference room with a new number must be created. CCA-13:013, CCA Android Manual, Rev O 14 (36)

15 The conference room number is distributed to the participants, along with the date and time for the conference call. As the conference room number plays no role in the security of the conference call, the number can be distributed to the participants in any form, for instance via or by using a shared calendar. When the conference call should begin, the host simply dials the conference room number on the dial pad, prefixed by ##, or uses the call button in the list of conferences. This automatically starts the conference call, but there are still no participants apart from the host. When participants either late callers or participants who have been waiting for the host are trying to join, the host s phone vibrates and a call waiting tone is played in the speaker. To accept the caller into the conference, tap the blue accept button. If the caller should not be allowed into the conference, long press the row and tap the Decline button. Accepting a caller into a conference call is a one-way process, and it is not possible to force a caller to leave the conference call. For this reason, users who have been accepted into the conference call are also automatically accepted if they lose network connectivity and call into the conference again. The list of all participants accepted to join the conference is available by tapping the Participants button. Note also that the entire conference call is protected by a secret randomly generated by the conference call host each time he or she opens the conference call. If the conference call host hangs up, then the conference call continues, but new participants cannot be accepted. Should the conference call host dial in again, the conference call will start anew after a brief interruption. Best practice for allowing an external party, say, to participate only in the latter part of a conference call is to maintain two conference rooms, and move to the second conference room when the external party should join. CCA-13:013, CCA Android Manual, Rev O 15 (36)

16 Secure text messages To start a new conversation, tap the new message floating action button in the Messages view or tap the new message button on the Contact Details view. To post a new message in an existing conversation, open that conversation and select the input field to bring up the keyboard. To attach an image or a video to the message, tap the paper clip and select an image from the phone s library or take a new picture or video. Press the send button to send. CCA-13:013, CCA Android Manual, Rev O 16 (36)

17 The administrator can limit for how long messages can be viewed in the app, in which case messages expire at a specific point in time. Note that messages may expire before the recipient has viewed them. The maximum lifetime cannot be increased, but it is possible to select a shorter message lifetime by selecting Message lifetime from the overflow menu. A message that will expire is marked with a timer icon next to the message time stamp. To show when the message will expire, long press the message and select Status. The status of an outgoing message is displayed next to the timestamp: Sending the message is being uploaded to the server. Sent the message has been transferred to the server. Delivered the message has been delivered to the recipient. Read the recipient has opened the conversation. Failed sending the message failed; long press the message and select Status for more information or Resend to immediately try again. To show the sender s compose time of an incoming message, long press the message and tap Status. If this timestamp differs more than 5 minutes from when the message was received, a warning icon is shown. CCA-13:013, CCA Android Manual, Rev O 17 (36)

18 CCA-13:013, CCA Android Manual, Rev O 18 (36)

19 Groups The group concept in Cryptify Call enables contacts lists management as well as the ability to send and receive group messages. The person who creates the group is also the administrator of the group. To create a group the administrator adds contacts whereby an invitation will be sent. Upon acceptance of the invitation the contact become a member of the group. Members of the group will be updated of changes, e.g. when new members arrive and when members leave. A group can consist of members belonging to different Security Domains. NB! In case members belong to multiple Security Domains they must all be connected with each other for group messaging to work, i.e. it is not sufficient that only the administrator s domain is connected. To view and edit groups, tap the Groups icon in the Messages view. Groups for which you are the administrator are listed under section Administrator, groups where you are a member are listed under section Member, and pending invitations are listed under section Invitations. Groups where you are no longer a member, either by the initiative to leave the group yourself or removed by the administrator, are listed under the section Other. CCA-13:013, CCA Android Manual, Rev O 19 (36)

20 Managing a group To create a new group, select the new group floating action button. The one creating the group will also be the administrator of the group. Type a name for the group, and start to add contacts. Contacts are picked from the native address book of the your device. NB! The group name cannot be changes afterwards Press INVITE when ready. Each contact will receive an invitation that must be accepted to join the group as a member. CCA-13:013, CCA Android Manual, Rev O 20 (36)

21 To view or change the properties of a group please open the Group Details view. Modify the group properties by tapping the Edit button. In edit mode members can be added or deleted. CCA-13:013, CCA Android Manual, Rev O 21 (36)

22 There is also an option to refresh group to manually trigger a resending in case network errors have occurred when invite or group updates was sent out. CCA-13:013, CCA Android Manual, Rev O 22 (36)

23 The status of each member is listed and can be any of the following Status Invitation sent Ready Update sent Description A group invite is sent but no answer received yet Member is up-to-date A group update is sent but not yet confirmed by member. When ready select Done to confirm changes and update the group, or back to cancel. The administrator can also delete the group by selecting Delete Group. CCA-13:013, CCA Android Manual, Rev O 23 (36)

24 Joining a group To join a group you must be invited by the administrator of the group. Only when the invitation is accepted will you be a member of the group. In the invitation the administrator have suggested a name for you. This is the name that will be used in the contact information for you in that group. Please validate the following before accepting an invitation: Your name is correct You trust the administrator The group name is not misleading CCA-13:013, CCA Android Manual, Rev O 24 (36)

25 Being a group member As a member you can send and receive group messages. Tap the message floating action button within the Group Details view to send a new message. Group conversations are listed in the Messages view. A member can view the history of the group membership, i.e. view members that have joined or left the group. Please note that a member cannot view events that occur before joining or after leaving the group. CCA-13:013, CCA Android Manual, Rev O 25 (36)

26 Each received message is marked with the identity of the sender as well as a timestamp of when the message was received. To view the delivery status a posted message, long press on the message to bring up a pop over menu and select Status CCA-13:013, CCA Android Manual, Rev O 26 (36)

27 Channels In addition to Groups, Cryptify Call also supports so called channels, which are message groups that are centrally managed by the CMS operator. Channels are particularly well suited for large groups, such as everyone in an organization, and there is no extra step where the user accepts or declines membership. Channels are shown in the list of Groups under Member and work just as regular message groups. However, as channels supports thousands of users, it is for performance reasons not possible to see when a particular user has received or read a message. By default, and just as for regular text or group text messages, each incoming message to a channel renders a notification. It is, however, possible to mute a channel, which prevents notifications on incoming messages to that channel. Only the notification is blocked, ensuring that the messages can be read if they are decrypted within 14 days (unless prevented by message expiry). It is also possible to configure that incoming messages to a channel should be discarded immediately when received, without ever being decrypted or notified. Discarded messages are permanently deleted and cannot be retrieved at a later time. If a device is to be offline for an extended period of time, it is recommended to configure any high traffic channels to discard incoming traffic. Otherwise, once the device goes online, the app may become unresponsive while it decrypts the messages that have been queued up. The channel settings are also visible under Settings > Channels. CCA-13:013, CCA Android Manual, Rev O 27 (36)

28 Cryptify Test Call A user can make a Cryptify Test Call to verify the call quality. In the More menu select Cryptify Test Call and follow the audio instructions. CCA-13:013, CCA Android Manual, Rev O 28 (36)

29 The Advanced menu and message PIN lock In the More menu select App details to display detailed information of the Cryptify Call application. The message tab can be locked with a PIN code by tapping Lock and entering a 4 digit PIN code. If the PIN code is forgotten, the message tab can be unlocked with a PUK code available in the Cryptify Management System. Name Public ID Security Domain CRS Address Keys Description This is the users public cryptographic identity This is the identity of the Cryptify Management System (CMS) that has issued the cryptographic keys for the user This is the Fully Qualified Domain Name (FQDN), or IP address of the Cryptify Rendezvous Server (CRS) serving the user Valid keys are listed. There could be two keys during the grace period. Syntax is YYYY-MM-XXXXXXXXX, where YYYY- MM is the year and month the key is valid NB! Erase Keydata will prompt the user to erase all content and settings for the Cryptify Call application! The app will not be usable until a new QR code has been scanned. CCA-13:013, CCA Android Manual, Rev O 29 (36)

30 Application update To guarantee full functionality and security within the application it is important that users keep Cryptify Call up to date. If users are permitted to update their apps, they will receive notifications from the Play Store when a new version is available. When the Play Store indicates that an update is available, the user should open the Play Store app, select the update tab, and click the update button for Cryptify Call if shown. Play Store enables automatic updates of apps. To disable automatic updates, please open Google Play Store. All apps Menu -> Settings Un-check Auto-update apps Cryptify Call specifically Select Cryptify Call under My apps Menu -> uncheck Auto-update Otherwise, administrators for the local system may ask to update the apps when these updates are available on behalf of their users. CCA-13:013, CCA Android Manual, Rev O 30 (36)

31 Manual key removal / replacement This procedure is in case the keys should be deleted from the device, or if the CMS administrator decides to perform a manual key replacement. Normally keys are updated automatically without any user intervention. In the More view, select App details and then Erase keydata and press the YES button. The application will now search for the QR code containing the key update. NB! Erase keydata will prompt the user to erase all content and settings for the Cryptify Call application, including stored messages, call history, and stored favorites! New keys must be received by the user in the form of a QR code, see Provisioning user credentials above. CCA-13:013, CCA Android Manual, Rev O 31 (36)

32 Configuration Application specific configuration Parameters that can be configured by the users are presented in the Settings menu Ringtone This is the ringtone played during incoming calls. The user can select from a list of different ring tones. Notification sound This is the sound played during incoming messages. The user can select from a list of different ring sounds. CCA-13:013, CCA Android Manual, Rev O 32 (36)

33 Troubleshooting Reason Codes Unsuccessful call establishment Reason Code Description Not Found There is no match for the called number. Either the called number does not have a Cryptify Call subscription, or the called number belongs to another Cryptify Call domain not connected to callers domain. To request another Cryptify Call domain to be connected / approved, please contact Your local Cryptify Call support. Not Available The called number is currently not connected to the system, e.g. when the phone is powered off, or in airplane mode, or if the called party have manually terminated the Cryptify Call application. Busy The called party declined the call, or is currently occupied by another call, either an ordinary call or a secure Cryptify Call. Communication Failure This could be caused by an incompatible software version. Please make sure Your and called party s Cryptify Call applications are up-to-date. If this happens repeatedly please contact Your local Cryptify Call support. Authentication Failure Cryptographic failure. Please contact Your local Cryptify Call support! No Answer The called party has not answered the call within one minute. Dropped call Reason Code Network Failure Description No audio received the last 30 seconds. The network problem could be either you, or the other party. This problem is normally triggered when going out of cellular coverage, e.g. a building, underground, etc. Unsuccessful messaging Reason Code Failed, user not found Description There is no match for the recipient number. Either the recipient number does not have a Cryptify Call subscription, or that number belongs to another Cryptify Call domain not connected to callers domain. To request another Cryptify Call domain to be connected / approved, please contact Your local Cryptify Call support. CCA-13:013, CCA Android Manual, Rev O 33 (36)

34 Failed, bad network Failed to authenticate Failed, invalid Failed, no support Several failed attempts to send the message. This is caused by unstable network connection. If You are using Wi-Fi, please disable Wi-Fi and try again. If this happens repeatedly please contact Your local Cryptify Call support. Cryptographic failure. Please contact Your local Cryptify Call support! This could be caused by an incompatible software version. Please make sure Your and called party s Cryptify Call applications are up-to-date. If this happens repeatedly please contact Your local Cryptify Call support. This could be caused by an incompatible software version. Please make sure Your and called party s Cryptify Call applications are up-to-date. If this happens repeatedly please contact Your local Cryptify Call support. FAQ Q: Why do I get a failure when scanning a QR code? A: Failure to scan a QR code can be subcategorized into the following subcategories 1. Video quality problem Symptom: The app is unable to detect the QR code and keeps on recording CCA-13:013, CCA Android Manual, Rev O 34 (36)

35 Description: if the captured video feed does not have high enough quality it will not be possible to decode images containing the QR code. Remedy: This is normally due to a malfunctioning camera or distorted paper copy of the QR code. 2. QR code not created by a Cryptify Management System Symptom: Error message stating, No valid QR code detected Description: the Cryptify Call app will only accept a QR code that is created by a Cryptify Management System Remedy: Please request a QR code from your system administrator 3. Obsolete app version Symptom: Error message stating, No valid QR code detected Description: In case the system administrator enables mandatory policies only Cryptify Call version compliant with such policies will accept the QR code. Remedy: Please update to the latest version of the Cryptify Call app in the Google Play Store. Q: Why doesn t my app get the monthly update? A: Failure to get monthly update can be subcategorized into the following subcategories 1. Network problem Symptom: Unable to connect in the Cryptify Call service notification Description: The app must be able to connect to the Cryptify Rendezvous Server in order to download new updates and to use the Cryptify Call service. Remedy: Please acquire network connectivity in order for the device to connect to the Cryptify Rendezvous Server 2. Obsolete app version Symptom: Key for the period is not listed under More->App details. Keys for September 2017 will have the syntax NNNNNNNNNN Description: In case the system administrator enables mandatory policies only Cryptify Call version compliant with such policies will accept the update. Remedy: Please update to the latest version of the Cryptify Call app in the Google Play Store. 3. Changed update key Symptom: Key for the period is not listed under More- >Advanced. Keys for September 2017 will have the syntax NNNNNNNNNN Description: In case the system administrator has deleted the account or performed a re-key operation the existing update key stored is no longer valid. CCA-13:013, CCA Android Manual, Rev O 35 (36)

36 Remedy: Please request a QR code from your system administrator CCA-13:013, CCA Android Manual, Rev O 36 (36)